codex-workflow-v2 2.0.0-beta.13.9 → 2.0.0-beta.14.1

package/dist/src/checks/worker.js

@@ -0,0 +1,154 @@
+import { spawn } from 'node:child_process';
+import { readFileSync, writeFileSync, renameSync, existsSync } from 'node:fs';
+const request = JSON.parse(readFileSync(process.argv[2], 'utf8'));
+const { nonce, command, cwd, deadlineNs, graceMs, cap, parentPid, resultFile, journalFile, cancellationFile } = request;
+// Refuse to launch work unless this process really owns its dedicated POSIX group.
+try {
+    process.kill(-process.pid, 0);
+}
+catch {
+    process.exit(70);
+}
+writeFileSync(journalFile, JSON.stringify({
+    protocol: 1,
+    pid: process.pid,
+    parentPid,
+    nonce,
+    groupLeader: true
+}), {
+    mode: 0o600
+});
+let out = Buffer.alloc(0);
+let err = Buffer.alloc(0);
+let combined = Buffer.alloc(0);
+let bytes = 0;
+let truncated = false;
+let stopping = false;
+let finished = false;
+let errorCode = null, errorMessage = null;
+let exitCode = null, signal = null;
+const append = (data, stderr) => {
+    bytes = Math.min(Number.MAX_SAFE_INTEGER, bytes + data.length);
+    const retain = (old) => {
+        const joined = Buffer.concat([old, data]);
+        if (joined.length > cap) {
+            truncated = true;
+        }
+        return joined.subarray(Math.max(0, joined.length - cap));
+    };
+    combined = retain(combined);
+    if (stderr) {
+        err = retain(err);
+    }
+    else {
+        out = retain(out);
+    }
+};
+const text = (b) => {
+    const decoded = Buffer.from(b.toString('utf8'));
+    return decoded.subarray(Math.max(0, decoded.length - cap)).toString('utf8');
+};
+function record(reason) {
+    const tmp = resultFile + '.tmp';
+    writeFileSync(tmp, JSON.stringify({
+        protocol: 1,
+        nonce,
+        pid: process.pid,
+        reason,
+        errorCode,
+        errorMessage,
+        exitCode,
+        finishedAtNs: process.hrtime.bigint().toString(),
+        signal,
+        output: text(combined),
+        stdoutTail: text(out),
+        stderrTail: text(err),
+        outputBytes: bytes,
+        outputTruncated: truncated
+    }), {
+        mode: 0o600
+    });
+    renameSync(tmp, resultFile);
+}
+function stop(reason) {
+    if (stopping || finished) {
+        return;
+    }
+    stopping = true;
+    try {
+        record(reason);
+    }
+    catch {
+    }
+    try {
+        process.kill(-process.pid, 'SIGTERM');
+    }
+    catch {
+    }
+    setTimeout(() => {
+        try {
+            record(reason);
+        }
+        catch {
+        }
+        process.kill(-process.pid, 'SIGKILL');
+    }, graceMs);
+}
+process.on('SIGTERM', () => stop('cancelled'));
+process.on('SIGINT', () => stop('cancelled'));
+if (process.ppid !== parentPid) {
+    record('parent-exit');
+    process.exit(1);
+}
+const deadline = BigInt(deadlineNs);
+if (cancellationFile && existsSync(cancellationFile)) {
+    record('cancelled');
+    process.exit(1);
+}
+if (process.hrtime.bigint() >= deadline) {
+    record('timeout');
+    process.exit(1);
+}
+const child = spawn('/bin/sh', ['-lc', command], {
+    cwd,
+    env: process.env,
+    stdio: ['ignore', 'pipe', 'pipe']
+});
+child.stdout.on('data', (b) => append(b, false));
+child.stderr.on('data', (b) => append(b, true));
+const timer = setTimeout(() => stop('timeout'), Math.max(0, Number((deadline - process.hrtime.bigint()) / 1000000n)));
+const monitor = setInterval(() => {
+    if (process.ppid !== parentPid) {
+        stop('parent-exit');
+    }
+    else if (cancellationFile && existsSync(cancellationFile)) {
+        stop('cancelled');
+    }
+}, 25);
+child.on('exit', (code, s) => {
+    exitCode = code;
+    signal = s;
+});
+child.on('error', (error) => {
+    errorCode = error.code ?? 'CHECK_SPAWN_FAILED';
+    errorMessage = error.message.slice(0, 1024);
+    if (stopping || finished) {
+        return;
+    }
+    finished = true;
+    clearTimeout(timer);
+    clearInterval(monitor);
+    record('launch-failed');
+});
+child.on('close', (code, s) => {
+    exitCode = code;
+    signal = s;
+    if (stopping || finished) {
+        return;
+    }
+    finished = true;
+    clearTimeout(timer);
+    clearInterval(monitor);
+    record('exit');
+});
+//# sourceMappingURL=worker.js.map

package/dist/src/checks/worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker.js","sourceRoot":"","sources":["../../../src/checks/worker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC9E,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAE,EAAE,MAAM,CAAC,CAAC,CAAC;AACnE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,gBAAgB,EAAE,GAAG,OAAO,CAAC;AACxH,mFAAmF;AACnF,IAAI,CAAC;IACH,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;AAChC,CAAC;AAAC,MAAM,CAAC;IACP,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACnB,CAAC;AACD,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC;IACxC,QAAQ,EAAE,CAAC;IACX,GAAG,EAAE,OAAO,CAAC,GAAG;IAChB,SAAS;IACT,KAAK;IACL,WAAW,EAAE,IAAI;CAClB,CAAC,EAAE;IACF,IAAI,EAAE,KAAK;CACZ,CAAC,CAAC;AACH,IAAI,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC1B,IAAI,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC1B,IAAI,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC/B,IAAI,KAAK,GAAG,CAAC,CAAC;AACd,IAAI,SAAS,GAAG,KAAK,CAAC;AACtB,IAAI,QAAQ,GAAG,KAAK,CAAC;AACrB,IAAI,QAAQ,GAAG,KAAK,CAAC;AACrB,IAAI,SAAS,GAAkB,IAAI,EAAE,YAAY,GAAkB,IAAI,CAAC;AACxE,IAAI,QAAQ,GAAkB,IAAI,EAAE,MAAM,GAA0B,IAAI,CAAC;AACzE,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,MAAe,EAAE,EAAE;IAC/C,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,CAAC,GAAW,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;QAC1C,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YACxB,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC;QACD,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC;IAC3D,CAAC,CAAC;IACF,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC5B,IAAI,MAAM,EAAE,CAAC;QACX,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC;SACI,CAAC;QACJ,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC;AACH,CAAC,CAAC;AACF,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE;IACzB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAChD,OAAO,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC9E,CAAC,CAAC;AACF,SAAS,MAAM,CAAC,MAAc;IAC5B,MAAM,GAAG,GAAG,UAAU,GAAG,MAAM,CAAC;IAChC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC;QAChC,QAAQ,EAAE,CAAC;QACX,KAAK;QACL,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,MAAM;QACN,SAAS;QACT,YAAY;QACZ,QAAQ;QACR,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAChD,MAAM;QACN,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC;QACtB,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC;QACrB,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC;QACrB,WAAW,EAAE,KAAK;QAClB,eAAe,EAAE,SAAS;KAC3B,CAAC,EAAE;QACF,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;IACH,UAAU,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;AAC9B,CAAC;AACD,SAAS,IAAI,CAAC,MAAc;IAC1B,IAAI,QAAQ,IAAI,QAAQ,EAAE,CAAC;QACzB,OAAO;IACT,CAAC;IACD,QAAQ,GAAG,IAAI,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;IACT,CAAC;IACD,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;IACT,CAAC;IACD,UAAU,CAAC,GAAG,EAAE;QACd,IAAI,CAAC;YACH,MAAM,CAAC,MAAM,CAAC,CAAC;QACjB,CAAC;QAAC,MAAM,CAAC;QACT,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACxC,CAAC,EAAE,OAAO,CAAC,CAAC;AACd,CAAC;AACD,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;AAC/C,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;AAC9C,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;IAC/B,MAAM,CAAC,aAAa,CAAC,CAAC;IACtB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AACD,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;AACpC,IAAI,gBAAgB,IAAI,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;IACrD,MAAM,CAAC,WAAW,CAAC,CAAC;IACpB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AACD,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;IACxC,MAAM,CAAC,SAAS,CAAC,CAAC;IAClB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AACD,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE;IAC/C,GAAG;IACH,GAAG,EAAE,OAAO,CAAC,GAAG;IAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;CAClC,CAAC,CAAC;AACH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;AACzD,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;AACxD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,QAAU,CAAC,CAAC,CAAC,CAAC;AACxH,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE;IAC/B,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/B,IAAI,CAAC,aAAa,CAAC,CAAC;IACtB,CAAC;SACI,IAAI,gBAAgB,IAAI,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC1D,IAAI,CAAC,WAAW,CAAC,CAAC;IACpB,CAAC;AACH,CAAC,EAAE,EAAE,CAAC,CAAC;AACP,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;IAC3B,QAAQ,GAAG,IAAI,CAAC;IAChB,MAAM,GAAG,CAAC,CAAC;AACb,CAAC,CAAC,CAAC;AACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAA4B,EAAE,EAAE;IACjD,SAAS,GAAG,KAAK,CAAC,IAAI,IAAI,oBAAoB,CAAC;IAC/C,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAC5C,IAAI,QAAQ,IAAI,QAAQ,EAAE,CAAC;QACzB,OAAO;IACT,CAAC;IACD,QAAQ,GAAG,IAAI,CAAC;IAChB,YAAY,CAAC,KAAK,CAAC,CAAC;IACpB,aAAa,CAAC,OAAO,CAAC,CAAC;IACvB,MAAM,CAAC,eAAe,CAAC,CAAC;AAC1B,CAAC,CAAC,CAAC;AACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;IAC5B,QAAQ,GAAG,IAAI,CAAC;IAChB,MAAM,GAAG,CAAC,CAAC;IACX,IAAI,QAAQ,IAAI,QAAQ,EAAE,CAAC;QACzB,OAAO;IACT,CAAC;IACD,QAAQ,GAAG,IAAI,CAAC;IAChB,YAAY,CAAC,KAAK,CAAC,CAAC;IACpB,aAAa,CAAC,OAAO,CAAC,CAAC;IACvB,MAAM,CAAC,MAAM,CAAC,CAAC;AACjB,CAAC,CAAC,CAAC"}

package/dist/src/cli-actions.d.ts

@@ -7,14 +7,14 @@
 declare const CLI_ACTIONS_LITERAL: {
     readonly gateway: readonly ["handshake"];
     readonly change: readonly ["explain"];
-    readonly update: readonly ["preflight", "pending-review-source-preflight", "pending-review-dependency-preflight", "pending-review-dependency-recover", "rescue-preflight", "dependency-provenance-preflight", "corrective-carryover-preflight", "dependency-provenance-recover", "historical-step-dependency-preflight", "historical-step-dependency-recover", "downstream-proof-dependency-preflight", "downstream-proof-dependency-recover", "downstream-proof-replan-update-preflight", "downstream-proof-replan-dependency-preflight", "downstream-proof-replan-dependency-recover", "plan-integrity-update-preflight", "plan-integrity-dependency-preflight", "plan-integrity-dependency-recover"];
+    readonly update: readonly ["preflight", "navigation-source-preflight", "navigation-transport-preflight", "navigation-recover", "failed-checkpoint-source-preflight", "failed-checkpoint-transport-preflight", "failed-checkpoint-recover", "dependency-provenance-preflight", "dependency-provenance-recover", "historical-step-dependency-preflight", "historical-step-dependency-recover", "downstream-proof-dependency-preflight", "downstream-proof-dependency-recover"];
     readonly delegation: readonly ["prepare", "grant", "list", "show", "revoke"];
     readonly 'project-memory': readonly ["scan", "show", "status", "approve", "reconcile"];
     readonly state: readonly ["migrate", "adoption-prepare", "adoption-apply"];
     readonly graph: readonly ["prepare", "status", "refresh-request", "bind", "fallback"];
     readonly discovery: readonly ["start", "update", "show", "materialize"];
-    readonly task: readonly ["show", "replacement-materialize", "preexecution-replan", "plan-set", "knowledge-rebind", "context-refresh", "authorize", "plan-risk-audit", "start", "run", "step-complete", "submit", "review-record", "review-launch", "review-packet", "review-sealed-record", "step-review", "step-review-packet", "step-review-record", "corrective-decision-recover", "remediation-mode-recover", "plan-integrity-recover", "downstream-proof-recover", "downstream-proof-replan-recover", "stop-override-prepare", "stop-override-apply", "corrective-decision", "corrective-yield", "corrective-yield-recover", "corrective-replan-prepare", "corrective-replan-confirm", "corrective-replan-execute", "corrective-replan-recover", "historical-step-provenance-preflight", "historical-step-provenance-recover", "handoff", "handoff-prepare", "handoff-replace", "handoff-show", "claim", "writer-credential-replace", "handback", "handback-create", "result-set", "accept", "sync-base", "merge", "merge-confirm"];
-    readonly milestone: readonly ["recover", "show", "progress", "plan-set", "remediation-materialize", "scope-change-prepare", "scope-change-apply", "autonomy-prepare", "autonomy-grant", "autonomy-evolve", "authorize", "validate", "accept", "cancel"];
+    readonly task: readonly ["show", "replacement-materialize", "preexecution-replan", "plan-set", "knowledge-rebind", "context-refresh", "authorize", "plan-risk-audit", "start", "run", "step-complete", "submit", "review-record", "review-launch", "review-packet", "review-sealed-record", "step-review", "step-review-packet", "step-review-record", "corrective-decision-recover", "plan-integrity-recover", "downstream-proof-recover", "corrective-decision", "corrective-yield", "corrective-yield-recover", "corrective-replan-prepare", "corrective-replan-authorize", "corrective-replan-confirm", "corrective-replan-execute", "corrective-replan-recover", "historical-step-provenance-preflight", "historical-step-provenance-recover", "handoff", "handoff-prepare", "handoff-replace", "handoff-show", "claim", "writer-credential-replace", "handback", "handback-create", "result-set", "accept", "sync-base", "merge", "merge-confirm"];
+    readonly milestone: readonly ["recover", "show", "progress", "plan-set", "remediation-materialize", "scope-change-prepare", "scope-change-apply", "autonomy-prepare", "autonomy-grant", "autonomy-bind", "autonomy-evolve", "authorize", "validate", "accept", "cancel"];
     readonly locks: readonly ["inspect", "repair"];
 };
 export declare const CLI_ACTIONS: Readonly<Record<string, readonly string[]>>;

package/dist/src/cli-actions.js

@@ -9,23 +9,18 @@ const CLI_ACTIONS_LITERAL = {
     change: ['explain'],
     update: [
         'preflight',
-        'pending-review-source-preflight',
-        'pending-review-dependency-preflight',
-        'pending-review-dependency-recover',
-        'rescue-preflight',
+        'navigation-source-preflight',
+        'navigation-transport-preflight',
+        'navigation-recover',
+        'failed-checkpoint-source-preflight',
+        'failed-checkpoint-transport-preflight',
+        'failed-checkpoint-recover',
         'dependency-provenance-preflight',
-        'corrective-carryover-preflight',
         'dependency-provenance-recover',
         'historical-step-dependency-preflight',
         'historical-step-dependency-recover',
         'downstream-proof-dependency-preflight',
         'downstream-proof-dependency-recover',
-        'downstream-proof-replan-update-preflight',
-        'downstream-proof-replan-dependency-preflight',
-        'downstream-proof-replan-dependency-recover',
-        'plan-integrity-update-preflight',
-        'plan-integrity-dependency-preflight',
-        'plan-integrity-dependency-recover',
     ],
     delegation: ['prepare', 'grant', 'list', 'show', 'revoke'],
     'project-memory': ['scan', 'show', 'status', 'approve', 'reconcile'],
@@ -53,16 +48,13 @@ const CLI_ACTIONS_LITERAL = {
         'step-review-packet',
         'step-review-record',
         'corrective-decision-recover',
-        'remediation-mode-recover',
         'plan-integrity-recover',
         'downstream-proof-recover',
-        'downstream-proof-replan-recover',
-        'stop-override-prepare',
-        'stop-override-apply',
         'corrective-decision',
         'corrective-yield',
         'corrective-yield-recover',
         'corrective-replan-prepare',
+        'corrective-replan-authorize',
         'corrective-replan-confirm',
         'corrective-replan-execute',
         'corrective-replan-recover',
@@ -92,6 +84,7 @@ const CLI_ACTIONS_LITERAL = {
         'scope-change-apply',
         'autonomy-prepare',
         'autonomy-grant',
+        'autonomy-bind',
         'autonomy-evolve',
         'authorize',
         'validate',

package/dist/src/cli-actions.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli-actions.js","sourceRoot":"","sources":["../../src/cli-actions.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,mBAAmB,GAAG;IAC1B,OAAO,EAAE,CAAC,WAAW,CAAC;IACtB,MAAM,EAAE,CAAC,SAAS,CAAC;IACnB,MAAM,EAAE;QACN,WAAW;QACX,iCAAiC;QACjC,qCAAqC;QACrC,mCAAmC;QACnC,kBAAkB;QAClB,iCAAiC;QACjC,gCAAgC;QAChC,+BAA+B;QAC/B,sCAAsC;QACtC,oCAAoC;QACpC,uCAAuC;QACvC,qCAAqC;QACrC,0CAA0C;QAC1C,8CAA8C;QAC9C,4CAA4C;QAC5C,iCAAiC;QACjC,qCAAqC;QACrC,mCAAmC;KACpC;IACD,UAAU,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC;IAC1D,gBAAgB,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,CAAC;IACpE,KAAK,EAAE,CAAC,SAAS,EAAE,kBAAkB,EAAE,gBAAgB,CAAC;IACxD,KAAK,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,EAAE,UAAU,CAAC;IACnE,SAAS,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,CAAC;IACrD,IAAI,EAAE;QACJ,MAAM;QACN,yBAAyB;QACzB,qBAAqB;QACrB,UAAU;QACV,kBAAkB;QAClB,iBAAiB;QACjB,WAAW;QACX,iBAAiB;QACjB,OAAO;QACP,KAAK;QACL,eAAe;QACf,QAAQ;QACR,eAAe;QACf,eAAe;QACf,eAAe;QACf,sBAAsB;QACtB,aAAa;QACb,oBAAoB;QACpB,oBAAoB;QACpB,6BAA6B;QAC7B,0BAA0B;QAC1B,wBAAwB;QACxB,0BAA0B;QAC1B,iCAAiC;QACjC,uBAAuB;QACvB,qBAAqB;QACrB,qBAAqB;QACrB,kBAAkB;QAClB,0BAA0B;QAC1B,2BAA2B;QAC3B,2BAA2B;QAC3B,2BAA2B;QAC3B,2BAA2B;QAC3B,sCAAsC;QACtC,oCAAoC;QACpC,SAAS;QACT,iBAAiB;QACjB,iBAAiB;QACjB,cAAc;QACd,OAAO;QACP,2BAA2B;QAC3B,UAAU;QACV,iBAAiB;QACjB,YAAY;QACZ,QAAQ;QACR,WAAW;QACX,OAAO;QACP,eAAe;KAChB;IACD,SAAS,EAAE;QACT,SAAS;QACT,MAAM;QACN,UAAU;QACV,UAAU;QACV,yBAAyB;QACzB,sBAAsB;QACtB,oBAAoB;QACpB,kBAAkB;QAClB,gBAAgB;QAChB,iBAAiB;QACjB,WAAW;QACX,UAAU;QACV,QAAQ;QACR,QAAQ;KACT;IACD,KAAK,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC;CACpB,CAAC;AAEX,MAAM,CAAC,MAAM,WAAW,GAAgD,mBAAmB,CAAC;AAO5F,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACpF,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,SAAS,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAChC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAY,CAAC;IACpD,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,CAAkC,CAAC;IACrE,OAAO,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC;AAC9C,CAAC"}
+{"version":3,"file":"cli-actions.js","sourceRoot":"","sources":["../../src/cli-actions.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,mBAAmB,GAAG;IAC1B,OAAO,EAAE,CAAC,WAAW,CAAC;IACtB,MAAM,EAAE,CAAC,SAAS,CAAC;IACnB,MAAM,EAAE;QACN,WAAW;QACX,6BAA6B;QAC7B,gCAAgC;QAChC,oBAAoB;QACpB,oCAAoC;QACpC,uCAAuC;QACvC,2BAA2B;QAC3B,iCAAiC;QACjC,+BAA+B;QAC/B,sCAAsC;QACtC,oCAAoC;QACpC,uCAAuC;QACvC,qCAAqC;KACtC;IACD,UAAU,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC;IAC1D,gBAAgB,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,CAAC;IACpE,KAAK,EAAE,CAAC,SAAS,EAAE,kBAAkB,EAAE,gBAAgB,CAAC;IACxD,KAAK,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,EAAE,UAAU,CAAC;IACnE,SAAS,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,CAAC;IACrD,IAAI,EAAE;QACJ,MAAM;QACN,yBAAyB;QACzB,qBAAqB;QACrB,UAAU;QACV,kBAAkB;QAClB,iBAAiB;QACjB,WAAW;QACX,iBAAiB;QACjB,OAAO;QACP,KAAK;QACL,eAAe;QACf,QAAQ;QACR,eAAe;QACf,eAAe;QACf,eAAe;QACf,sBAAsB;QACtB,aAAa;QACb,oBAAoB;QACpB,oBAAoB;QACpB,6BAA6B;QAC7B,wBAAwB;QACxB,0BAA0B;QAC1B,qBAAqB;QACrB,kBAAkB;QAClB,0BAA0B;QAC1B,2BAA2B;QAC3B,6BAA6B;QAC7B,2BAA2B;QAC3B,2BAA2B;QAC3B,2BAA2B;QAC3B,sCAAsC;QACtC,oCAAoC;QACpC,SAAS;QACT,iBAAiB;QACjB,iBAAiB;QACjB,cAAc;QACd,OAAO;QACP,2BAA2B;QAC3B,UAAU;QACV,iBAAiB;QACjB,YAAY;QACZ,QAAQ;QACR,WAAW;QACX,OAAO;QACP,eAAe;KAChB;IACD,SAAS,EAAE;QACT,SAAS;QACT,MAAM;QACN,UAAU;QACV,UAAU;QACV,yBAAyB;QACzB,sBAAsB;QACtB,oBAAoB;QACpB,kBAAkB;QAClB,gBAAgB;QAChB,eAAe;QACf,iBAAiB;QACjB,WAAW;QACX,UAAU;QACV,QAAQ;QACR,QAAQ;KACT;IACD,KAAK,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC;CACpB,CAAC;AAEX,MAAM,CAAC,MAAM,WAAW,GAAgD,mBAAmB,CAAC;AAO5F,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACpF,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,SAAS,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAChC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAY,CAAC;IACpD,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,CAAkC,CAAC;IACrE,OAAO,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC;AAC9C,CAAC"}

package/dist/src/cli.js

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import { SUPPORTED_NODE_VERSION, isSupportedNodeVersion } from './runtime.js';
 import { readFileSync } from 'node:fs';
 import path from 'node:path';
 import process from 'node:process';
@@ -15,22 +16,21 @@ import { WorkflowService, } from './workflow.js';
 import { gatewayHandshake } from './gateway-handshake.js';
 import { CLI_ACTIONS } from './cli-actions.js';
 const CLI_HELP_SPECS = {
+    'update navigation-source-preflight': { requiredOptions: ['--id', '--tarball'], optionalOptions: ['--repo', '--json'] },
+    'update failed-checkpoint-source-preflight': { requiredOptions: ['--id', '--tarball'], optionalOptions: ['--repo', '--json'] },
+    'update failed-checkpoint-transport-preflight': { requiredOptions: ['--id', '--tarball', '--file'], optionalOptions: ['--repo', '--json'] },
+    'update failed-checkpoint-recover': { requiredOptions: ['--id', '--tarball', '--file', '--expected-revision', '--actor', '--reason'], optionalOptions: ['--repo', '--json'] },
+    'update navigation-transport-preflight': { requiredOptions: ['--id', '--tarball', '--file'], optionalOptions: ['--repo', '--json'] },
+    'update navigation-recover': { requiredOptions: ['--id', '--tarball', '--file', '--expected-revision', '--actor', '--reason'], optionalOptions: ['--repo', '--json'] },
     'change explain': { requiredOptions: ['--task', '--file'], optionalOptions: ['--repo', '--json'] },
     'milestone remediation-materialize': {
         requiredOptions: ['--id', '--expected-revision', '--task', '--expected-task-revision', '--file'],
         optionalOptions: ['--repo', '--json'],
     },
-    'update pending-review-source-preflight': { requiredOptions: ['--id'], optionalOptions: ['--repo', '--json'] },
-    'update pending-review-dependency-preflight': { requiredOptions: ['--id', '--file'], optionalOptions: ['--repo', '--json'] },
-    'update pending-review-dependency-recover': { requiredOptions: ['--id', '--file', '--expected-revision', '--actor', '--reason'], optionalOptions: ['--repo', '--json'] },
     'update dependency-provenance-preflight': {
         requiredOptions: ['--id'],
         optionalOptions: ['--repo', '--json'],
     },
-    'update corrective-carryover-preflight': {
-        requiredOptions: ['--id'],
-        optionalOptions: ['--repo', '--json', '--file', '--risk-audit-file'],
-    },
     'task historical-step-provenance-preflight': {
         requiredOptions: ['--id'],
         optionalOptions: ['--repo', '--json'],
@@ -59,32 +59,16 @@ const CLI_HELP_SPECS = {
         requiredOptions: ['--id', '--expected-revision', '--actor', '--reason'],
         optionalOptions: ['--repo', '--json'],
     },
-    'update downstream-proof-replan-update-preflight': {
-        requiredOptions: ['--id'],
-        optionalOptions: ['--repo', '--json'],
-    },
-    'update downstream-proof-replan-dependency-preflight': {
-        requiredOptions: ['--id'],
-        optionalOptions: ['--repo', '--json'],
-    },
-    'update downstream-proof-replan-dependency-recover': {
-        requiredOptions: ['--id', '--expected-revision', '--actor', '--reason'],
-        optionalOptions: ['--repo', '--json'],
-    },
-    'update plan-integrity-update-preflight': {
-        requiredOptions: ['--id'],
-        optionalOptions: ['--repo', '--json'],
-    },
-    'update plan-integrity-dependency-preflight': {
+    'milestone progress': {
         requiredOptions: ['--id'],
         optionalOptions: ['--repo', '--json'],
     },
-    'update plan-integrity-dependency-recover': {
-        requiredOptions: ['--id', '--expected-revision', '--actor', '--reason'],
-        optionalOptions: ['--repo', '--json'],
+    'state adoption-apply': {
+        requiredOptions: ['--actor', '--confirmation-code'],
+        optionalOptions: ['--delegation-grant', '--repo', '--json'],
     },
-    'milestone progress': {
-        requiredOptions: ['--id'],
+    'milestone autonomy-bind': {
+        requiredOptions: ['--id', '--expected-revision', '--actor', '--delegation-grant'],
         optionalOptions: ['--repo', '--json'],
     },
     'milestone authorize': {
@@ -142,22 +126,14 @@ const CLI_HELP_SPECS = {
         requiredOptions: ['--id', '--expected-revision', '--actor', '--writer-credential-ref', '--reason'],
         optionalOptions: ['--repo', '--json'],
     },
-    'task downstream-proof-replan-recover': {
-        requiredOptions: ['--id', '--expected-revision', '--actor', '--reason'],
-        optionalOptions: ['--repo', '--json'],
-    },
-    'task stop-override-prepare': {
-        requiredOptions: ['--id', '--step', '--expected-revision', '--actor', '--reason'],
-        optionalOptions: ['--repo', '--json'],
-    },
-    'task stop-override-apply': {
-        requiredOptions: ['--id', '--step', '--expected-revision', '--actor', '--reason', '--confirmation-code'],
-        optionalOptions: ['--repo', '--json'],
-    },
     'task corrective-yield-recover': {
         requiredOptions: ['--id', '--transaction-id'],
         optionalOptions: ['--repo', '--json'],
     },
+    'task corrective-replan-authorize': {
+        requiredOptions: ['--id', '--file'],
+        optionalOptions: ['--repo', '--json'],
+    },
     'task corrective-replan-prepare': {
         requiredOptions: ['--id', '--file'],
         optionalOptions: ['--repo', '--json'],
@@ -427,7 +403,6 @@ const WRITER_CREDENTIAL_ACTIONS = [
     'task step-review',
     'task step-review-record',
     'task corrective-decision-recover',
-    'task remediation-mode-recover',
     'task plan-integrity-recover',
     'task downstream-proof-recover',
     'task corrective-decision',
@@ -494,11 +469,11 @@ async function dispatch(args) {
     if (noun === 'doctor') {
         const identity = resolveRepositoryIdentity(repo);
         const integration = integrationDiagnostics(identity.repositoryRoot);
-        const nodeSupported = Number(process.versions.node.split('.')[0]) >= 22;
+        const nodeSupported = isSupportedNodeVersion(process.versions.node);
         return {
             ok: nodeSupported && integration.localDependency.current,
             node: process.versions.node,
-            requiredNode: '>=22',
+            requiredNode: SUPPORTED_NODE_VERSION,
             repositoryRoot: identity.repositoryRoot,
             projectId: identity.projectId,
             stateRoot: workflow.store.root,
@@ -518,32 +493,29 @@ async function dispatch(args) {
         return workflow.next(repo, option(args, 'task') ?? null);
     if (noun === 'change' && action === 'explain')
         return workflow.explainChange(repo, required(args, 'task'), jsonFile(args));
-    if (noun === 'update' && action === 'pending-review-source-preflight') {
-        return workflow.pendingReviewUpdatePreflight(repo, required(args, 'id'));
-    }
-    if (noun === 'update' && (action === 'pending-review-dependency-preflight' || action === 'pending-review-dependency-recover')) {
-        const receipt = JSON.parse(readFileSync(required(args, 'file'), 'utf8'));
-        const source = 'value' in receipt && receipt.ok === true ? receipt.value : receipt;
-        if (!source.eligible || !source.binding)
-            throw new WorkflowError('INVALID_ARGUMENT', 'An eligible source preflight receipt is required.');
-        return action === 'pending-review-dependency-preflight'
-            ? workflow.pendingReviewDependencyPreflight(repo, required(args, 'id'), source.binding)
-            : workflow.recoverPendingReviewDependency(repo, required(args, 'id'), revision(args), source.binding, required(args, 'actor'), required(args, 'reason'));
-    }
     if (noun === 'update' && action === 'preflight')
         return workflow.updatePreflight(repo);
-    if (noun === 'update' && action === 'rescue-preflight') {
-        return workflow.alpha6StrictReviewRescuePreflight(repo);
+    if (noun === 'update' && action === 'navigation-source-preflight') {
+        return workflow.navigationUpdateSourcePreflight(repo, required(args, 'id'), required(args, 'tarball'));
+    }
+    if (noun === 'update' && action === 'failed-checkpoint-source-preflight') {
+        return workflow.failedCheckpointUpdateSourcePreflight(repo, required(args, 'id'), required(args, 'tarball'));
+    }
+    if (noun === 'update' && action === 'failed-checkpoint-transport-preflight') {
+        return workflow.failedCheckpointUpdateTransportPreflight(repo, required(args, 'id'), required(args, 'tarball'), jsonFile(args));
+    }
+    if (noun === 'update' && action === 'failed-checkpoint-recover') {
+        return workflow.recoverFailedCheckpointUpdate(repo, required(args, 'id'), revision(args), required(args, 'tarball'), jsonFile(args), required(args, 'actor'), required(args, 'reason'));
+    }
+    if (noun === 'update' && action === 'navigation-transport-preflight') {
+        return workflow.navigationUpdateTransportPreflight(repo, required(args, 'id'), required(args, 'tarball'), jsonFile(args));
+    }
+    if (noun === 'update' && action === 'navigation-recover') {
+        return workflow.recoverNavigationUpdate(repo, required(args, 'id'), revision(args), required(args, 'tarball'), jsonFile(args), required(args, 'actor'), required(args, 'reason'));
     }
     if (noun === 'update' && action === 'dependency-provenance-preflight') {
         return workflow.dependencyProvenanceRecoveryPreflight(repo, required(args, 'id'));
     }
-    if (noun === 'update' && action === 'corrective-carryover-preflight') {
-        return workflow.correctiveCarryoverUpdatePreflight(repo, required(args, 'id'), option(args, 'file') || option(args, 'risk-audit-file') ? {
-            plan: jsonFile(args),
-            planRiskAudit: jsonFile(args, 'risk-audit-file'),
-        } : null);
-    }
     if (noun === 'task' && action === 'historical-step-provenance-preflight') {
         return workflow.historicalStepProvenanceRecoveryPreflight(repo, required(args, 'id'));
     }
@@ -565,24 +537,6 @@ async function dispatch(args) {
     if (noun === 'update' && action === 'downstream-proof-dependency-recover') {
         return workflow.recoverActiveDownstreamProofDependencyProvenance(repo, required(args, 'id'), revision(args), required(args, 'actor'), required(args, 'reason'));
     }
-    if (noun === 'update' && action === 'downstream-proof-replan-update-preflight') {
-        return workflow.downstreamProofReplanUpdatePreflight(repo, required(args, 'id'));
-    }
-    if (noun === 'update' && action === 'downstream-proof-replan-dependency-preflight') {
-        return workflow.downstreamProofReplanDependencyRecoveryPreflight(repo, required(args, 'id'));
-    }
-    if (noun === 'update' && action === 'downstream-proof-replan-dependency-recover') {
-        return workflow.recoverDownstreamProofReplanDependencyProvenance(repo, required(args, 'id'), revision(args), required(args, 'actor'), required(args, 'reason'));
-    }
-    if (noun === 'update' && action === 'plan-integrity-update-preflight') {
-        return workflow.planIntegrityUpdatePreflight(repo, required(args, 'id'));
-    }
-    if (noun === 'update' && action === 'plan-integrity-dependency-preflight') {
-        return workflow.planIntegrityDependencyRecoveryPreflight(repo, required(args, 'id'));
-    }
-    if (noun === 'update' && action === 'plan-integrity-dependency-recover') {
-        return workflow.recoverPlanIntegrityDependencyProvenance(repo, required(args, 'id'), revision(args), required(args, 'actor'), required(args, 'reason'));
-    }
     if (noun === 'delegation' && action === 'prepare') {
         return workflow.prepareDelegation(repo, jsonFile(args));
     }
@@ -628,7 +582,7 @@ async function dispatch(args) {
         return workflow.prepareAdoption(repo);
     }
     if (noun === 'state' && action === 'adoption-apply') {
-        return workflow.applyAdoption(repo, required(args, 'actor'), required(args, 'confirmation-code'));
+        return workflow.applyAdoption(repo, required(args, 'actor'), required(args, 'confirmation-code'), option(args, 'delegation-grant') ?? null);
     }
     if (noun === 'milestone' && action === 'recover') {
         return workflow.recoverMilestoneTransactions(repo);
@@ -823,11 +777,6 @@ async function dispatch(args) {
         const actor = required(args, 'actor');
         return workflow.recoverStepCorrectiveDecision(repo, taskId, required(args, 'step'), revision(args), actor, credentialToken(workflow, repo, args, 'writer-lease', 'task corrective-decision-recover', taskId, actor, false));
     }
-    if (noun === 'task' && action === 'remediation-mode-recover') {
-        const taskId = required(args, 'id');
-        const actor = required(args, 'actor');
-        return workflow.recoverRemediationMode(repo, taskId, required(args, 'step'), revision(args), actor, credentialToken(workflow, repo, args, 'writer-lease', 'task remediation-mode-recover', taskId, actor, false));
-    }
     if (noun === 'task' && action === 'plan-integrity-recover') {
         const taskId = required(args, 'id');
         const actor = required(args, 'actor');
@@ -838,15 +787,6 @@ async function dispatch(args) {
         const actor = required(args, 'actor');
         return workflow.recoverDownstreamProof(repo, taskId, revision(args), actor, credentialToken(workflow, repo, args, 'writer-lease', 'task downstream-proof-recover', taskId, actor, true), required(args, 'reason'));
     }
-    if (noun === 'task' && action === 'downstream-proof-replan-recover') {
-        return workflow.recoverDownstreamProofReplan(repo, required(args, 'id'), revision(args), required(args, 'actor'), required(args, 'reason'));
-    }
-    if (noun === 'task' && action === 'stop-override-prepare') {
-        return workflow.prepareTaskStopOverride(repo, required(args, 'id'), required(args, 'step'), revision(args), required(args, 'actor'), required(args, 'reason'));
-    }
-    if (noun === 'task' && action === 'stop-override-apply') {
-        return workflow.applyTaskStopOverride(repo, required(args, 'id'), required(args, 'step'), revision(args), required(args, 'actor'), required(args, 'reason'), required(args, 'confirmation-code'));
-    }
     if (noun === 'task' && action === 'corrective-decision') {
         const taskId = required(args, 'id');
         return workflow.recordStepCorrectiveDecision(repo, taskId, required(args, 'step'), revision(args), jsonFile(args), option(args, 'actor'), credentialToken(workflow, repo, args, 'writer-lease', 'task corrective-decision', taskId, option(args, 'actor') ?? null, false));
@@ -861,6 +801,9 @@ async function dispatch(args) {
     if (noun === 'task' && action === 'corrective-yield-recover') {
         return workflow.recoverCorrectiveYield(repo, required(args, 'id'), required(args, 'transaction-id'));
     }
+    if (noun === 'task' && action === 'corrective-replan-authorize') {
+        return workflow.authorizeDelegatedCorrectiveReplan(repo, required(args, 'id'), jsonFile(args));
+    }
     if (noun === 'task' && action === 'corrective-replan-prepare') {
         return workflow.prepareCorrectiveReplan(repo, required(args, 'id'), jsonFile(args));
     }
@@ -992,6 +935,9 @@ async function dispatch(args) {
     if (noun === 'milestone' && action === 'autonomy-evolve') {
         return workflow.evolveMilestonePlanAutonomously(repo, required(args, 'id'), revision(args), jsonFile(args), required(args, 'actor'));
     }
+    if (noun === 'milestone' && action === 'autonomy-bind') {
+        return workflow.bindMilestoneAutonomy(repo, required(args, 'id'), revision(args), required(args, 'actor'), required(args, 'delegation-grant'));
+    }
     if (noun === 'milestone' && action === 'authorize') {
         return workflow.authorizeMilestone(repo, required(args, 'id'), revision(args), option(args, 'actor') ?? 'user', option(args, 'reason') ?? '', option(args, 'delegation-grant') ?? null);
     }